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State of Connecticut 
Office of the Attorney General 
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Hartford, CT 06106 

Re: Upright Law LLC - Incident Notification 

Dear Sir or Madam; 

McDonald Hopkins PLC represents Upright Law LLC (“Upright Law”). 1 am writing to 
provide notification of an incident at Upright Law that may affect the security of personal 
information of approximately one-hundred and twenty-six (126) Connecticut residents. Upright 
Law’s investigation is ongoing and this notification will be supplemented with any new or 
significant facts or findings subsequent to this submission, if any. By providing this notice. 
Upright Law does not waive any rights or defenses regarding the applicability of Connecticut 
law or personal jurisdiction. 

Upright Law was recently informed by a third-party vendor that the vendor’s own 
investigation concluded that a database hosted by the vendor and containing Upright Law’s 
clients’ personal information was potentially acquired by an unauthorized individual between 
July 27 and July 30, 2018. Upon learning of the issue. Upright Law promptly worked to 
determine what information was contained in the affected database in consultation with external 
data privacy and cybersecurity professionals experienced in handling these types of incidents. On 
December 27, 2018, Upright Law determined that the database contained the affected residents’ 
full names and either their Social Security numbers, their debit account information, or both. Not 
all of the affected residents had their Social Security numbers impacted. 

To date. Upright Law is not aware of any reports of identity fraud or improper use of any 
information as a direct result of this incident. Nevertheless, out of an abundance of caution. 
Upright Law wanted to make you (and the affected residents) aware of the incident and explain 
the steps it is taking to help safeguard the affected residents against identity theft. 

Upright Law is providing the affected residents with written notification of this incident 
in substantially the same form as the letter attached hereto commencing on or about January 25, 
2019. Upright Law is offering the affected residents whose Social Security numbers were 
impacted a complimentary two-year membership with a credit monitoring service. Upright Law 
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is advising the affected residents whose debit account information was impacted to contact their 
financial institutions to determine what steps they should take to protect their accounts. Upright 
Law is advising the affected residents about the process for placing a fraud alert and/or security 
freeze on their credit files and obtaining a free credit report. The affected residents are also being 
provided with the contact information for the consumer reporting agencies and the Federal Trade 
Commission. 

Upright Law is committed to protecting the privacy of personal information and has 
taken many precautions to safeguard it. Upright Law continually evaluates and modifies its 
practices to enhance the security and privacy of personal information. 

Should you have any questions regarding this notification, please contact me at (248) 
220-1354 orjgiszczak@mcdonaldhopkins.com. Thank you for your cooperation. 


Sincerely, 



James J. Giszczak 


Enel. 


McDonald 


Hopkins 


178744 '^^: ) 


A business advisory and advocacy law firm® 



UPRTGHT 

LAW 



IMPORTANT INFORMA TION 
PLEASE REVIEW CAREFULLY 




I am writing with important information regarding a recent security incident. The privacy and security of the 
personal information provided to us is of the utmost importance to UpRight Law LLC (“UpRight Law”). We 
wanted to provide you with information about the incident, explain the services we are making available to you, 
and let you know that we continue to take significant measures to protect your information. 

We were recently informed by a third-party vendor that its own investigation concluded that a database hosted 
by the vendor and containing UpRight Law’s clients’ personal information was potentially acquired by an 
unauthorized individual between July 27 and July 30, 2018. Upon learning of the issue, we immediately worked 
to determine what information was contained in the affected database in consultation with external data privacy 
and cybersecurity professionals experienced in handling these types of incidents. On December 27, 2018, we 
determined that the database contained your full name. Social Security number, and debit account information. 

To date, we are not aware of any reports of identity fraud or improper use of your information as a direct result of 
this incident. Out of an abundance of caution, we wanted to make you aware of the incident, explain the services 
we are making available to help safeguard you against identity fraud, and suggest steps that you should take as 
well. To protect you from potential misuse of your information, we are offering a complimentary two-year 
membership in Experian Identity Works®'’^ Credit 3B. This product helps detect possible misuse of your personal 
information and provides you with identity protection services focused on immediate identification and 
resolution of identity theft. IdentityWorks Credit 3B is completely free to you and enrolling in this program will 
not hurt your credit score. For more information on identity theft prevention and IdentityWorks Credit 3B, 
including instructions on how to activate your complimentary two-year membership, please see the additional 
information provided in this letter. 

This letter also provides other precautionary measures you can take to protect your personal information, 
including placing a Fraud Alert and/or Security Freeze on your credit files, and/or obtaining a free credit report. 
Because your debit account information was impacted, we recommend that you contact your financial institution 
to inquire about steps to take to protect your account, including whether you should close your account or obtain 
a new account number. Additionally, you should always remain vigilant in reviewing your financial account 
statements and credit reports for fraudulent or irregular activity on a regular basis. 

Please accept our apologies that this incident occurred. We are committed to protecting the privacy of personal 
information provided to us and have taken many precautions to safeguard it. We continually evaluate and 
modify our practices to enhance the security and privacy of your personal information. 

If you have any further questions regarding this incident, pleas e call our ded icated and confidential toll- 
free response line that we have set up to respond to questions This response line is staffed 

with personnel familiar with this incident and knowledgeable about what you can do to protect against misuse of 
your information. The response line is available Monday through Friday, 9 am to 9 pm. Eastern Time. 






Sincerely, 



Kevin Chem 
Managing Partner 


- OTHER IMPORTANT INFORMATION - 


I, Enrolling in Complimentary 24-Month Credit Monitoring . 

Activate IdentityWorks Credit 3B Now in Three Easy Steps 

I. ENROLL by: (Your code will not work after 

VISIT the Experian IdentityWo rks web site to enroll; 

3. PROVIDE the Activation Code: 

If you have questions about the product, need assistance with identity restoration or would like an alternative to 
enrolling in Experian IdentityWorks onli ne, please con tact Experian’s customer care team at 877-288-8057. Be 
prepared to provide engagement number as proof of eligibility for the identity restoration services 

by Experian. 

ADDITIONAL DETAILS REGARDING YOUR 24-MONTH EXPERIAN IDENTITYWORKS CREDIT 
3B MEMBERS HIP : 

A credit card is not required for enrollment in Experian IdentityWorks Credit 3B. 

You can contact Experian immediately without needing to enroll in the product regarding any fraud issues. 
Identity Restoration specialists are available to help you address credit and non-credit related fraud. 

Once you enroll in Experian IdentityWorks, you will have access to the following additional features: 

■ Experian credit report at signup: See what information is associated with your credit file. Daily 
credit reports are available for online members only.* 

■ Credit Monitoring: Actively monitors Experian, Equifax and Transunion files for indicators of fraud. 

■ Experian IdentityWorks ExtendCARE™: You receive the same high-level of Identity Restoration 
support even after your Experian IdentityWorks membership has expired. 

■ $1 Million Identity Theft Insurance**: Provides coverage for certain costs and unauthorized 
electronic fund transfers. 

Activa te your memb ership today at 

or call^^^^^^^Hto register with the activation code above. 

What you can do to protect your information: There are additional actions you can consider taking to reduce 
the chances of identity theft or fraud on your account(s). Please refer to www.ExperianlDWorks.com/restoration 
for this information. If you have any questions about IdentityWorks, need help understanding something on 
your credit report or suspect that an item on your credit report may be fraudulent, please contact Experian’s 
customer care team 


* Offline members will be eligible to call for additional reports quarterly after enrolling. 

** Identity theft insurance is underwritten by insurance company subsidiaries or affiliates of American International Group, Inc. (AIG). 
The description herein is a summary and intended for informational purposes only and does not include all terms, conditions and 
exclusions of the policies described. Please refer to the actual policies for terms, conditions, and exclusions of coverage. Coverage may 
not be available in all jurisdictions. 

2, Placing a Fraud Alert on Your Credit File . 

Whether or not you choose to use the complimentary 24 month credit monitoring services, we recommend that 
you place an initial 90-day “Fraud Alert” on your credit files, at no charge. A fraud alert tells creditors to 
contact you personally before they open any new accounts. To place a fraud alert, call any one of the three 
major credit bureaus at the numbers listed below. As soon as one credit bureau confirm s your fraud alert, they 
will notify the others. 








Equifax 

P.O. Box 105069 
Atlanta, GA 30348 
WWW, equifax. com 

1-800-525-6285 


Experian 

P.O. Box 2002 
Allen, TX 75013 
www.experian.com 

1-888-397-3742 


TransUnion EEC 

P.O. Box 2000 
Chester, PA 19016 
www.transunion. com 

1-800-680-7289 


3. Consider Placing a Security Freeze on Your Credit File . 

If you are very concerned about becoming a victim of fraud or identity theft, you may request a “Security 
Freeze” be placed on your credit file, at no charge. A security freeze prohibits, with certain specific exceptions, 
the consumer reporting agencies from releasing your credit report or any information from it without your 
express authorization. You may place a security freeze on your credit report by contacting all three nationwide 
credit reporting companies at the numbers below and following the stated directions or by sending a request in 
writing, by mail, to all three credit reporting companies: 

Equifax Security Freeze Experian Security Freeze TransUnion Security Freeze 

PO Box 105788 PO Box 9554 P.O. Box 2000 

Atlanta, GA 30348 Allen, TX 75013 Chester, PA 19016 

https://www.freeze.equifax.com http://experian.com/freeze http://www.transunion.com/securitvfreeze 

1-800-349-9960 1-888-397-3742 1-888-909-8872 

In order to place the security freeze, you’ll need to supply your name, address, date of birth. Social Security 
number and other personal information. After receiving your freeze request, each credit reporting company will 
send you a confirmation letter containing a unique PIN (personal identification number) or password. Keep the 
PIN or password in a safe place. You will need it if you choose to lift the freeze. 

If your personal information has been used to file a false tax return, to open an account or to attempt to open an 
account in your name or to commit fraud or other crimes against you, you may file a police report in the city in 
which you currently reside. 

If you do place a security freeze prior to enrolling in the credit monitoring service as described above, you will 
need to remove the freeze in order to sign up for the credit monitoring service. After you sign up for the credit 
monitoring service, you may refreeze your credit file. 

4. Obtaining a Free Credit Report . 

Under federal law, you are entitled to one free credit report every 12 months from each of the above three major 
nationwide credit reporting companies. Call 1-877-322-8228 or request your free credit reports online at 
www.annualcreditreport.com. Once you receive your credit reports, review them for discrepancies. Identify 
any accounts you did not open or inquiries from creditors that you did not authorize. Verify all information is 
correct. If you have questions or notice incorrect information, contact the credit reporting company. 

5. Additional Helpful Resources . 

Even if you do not find any suspicious activity on your initial credit reports, the Federal Trade Commission 
(FTC) recommends that you check your credit reports periodically. Checking your credit report periodically can 
help you spot problems and address them quickly. 

If you find suspicious activity on your credit reports or have reason to believe your information is being 
misused, call your local law enforcement agency and file a police report. Be sure to obtain a copy of the police 
report, as many creditors will want the information it contains to absolve you of the fraudulent debts. You may 
also file a complaint with the FTC by contacting them on the web at www.ftc.gov/idtheft, by phone at 1-877- 
IDTFIEFT (1-877-438-4338), or by mail at Federal Trade Commission, Consumer Response Center, 600 
Pennsylvania Avenue, NW, Washington, DC 20580. Your complaint will be added to the FTC’s Identity Theft 
Data Clearinghouse, where it will be accessible to law enforcement for their investigations. In addition, you 
may obtain information from the FTC about fraud alerts and security freezes. 














